PT-2020-3585 · Canonical+2 · Apport+3

Ga_Ryo + 1 · Published 2020-08-04 · Updated 2025-01-31 · CVE-2020-11936

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions gdbus versions (affected versions not specified) apport versions (affected versions not specified)

Description The issue is related to a privilege escalation in gdbus and an information disclosure vulnerability in the apport error reporting service. The apport vulnerability is caused by errors in the code and can be exploited through specially crafted D-Bus calls, allowing an attacker to read arbitrary files.

Recommendations For gdbus, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For apport, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2020-03919

CVE-2020-11936

USN-4449-1

USN-4449-2

ZDI-20-978

Affected Products

Linuxmint

Ubuntu

Apport

Gdbus

References · 18

• 🔥 https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1885633 · Exploit
• https://osv.dev/vulnerability/CVE-2020-11936 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-20-978 · Security Note
• https://ubuntu.com/security/notices/USN-4449-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-11936 · Security Note
• https://ubuntu.com/security/CVE-2020-11936 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11936 · Security Note
• https://ubuntu.com/security/CVE-2020-15702 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4449-2 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-11936 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-03919 · Security Note
• https://ubuntu.com/security/CVE-2020-15701 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4449-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4449-2 · Vendor Advisory
• https://t.me/cvedetector/16864 · Telegram Post